Take-Aways (AI)
  • Many of the Fede­ral Data Pro­tec­tion Commissioner’s recom­men­da­ti­ons were exami­ned, dis­cus­sed and in some cases adopted; howe­ver, the­re are no com­ple­te sta­tis­tics on their implementation.
  • Devia­ti­ons are main­ly based on dif­fe­rent con­side­ra­ti­ons and the use of dis­cretio­na­ry powers in accordance with the FADP; Biga will put the Inter­net file back into ope­ra­ti­on until data pro­tec­tion is improved.

Que­sti­on Rech­stei­ner (97.1143): Com­pli­ance by the fede­ral admi­ni­stra­ti­on with the recom­men­da­ti­ons of the data pro­tec­tion commissioner

Sub­mit­ted text

The 4th Acti­vi­ty Report of the Fede­ral Data Pro­tec­tion Com­mis­sio­ner 1996/97 shows that various recom­men­da­ti­ons, espe­ci­al­ly in the judi­cial and poli­ce sec­tors (e.g. with regard to the DOSIS system), are not being followed.

I the­r­e­fo­re ask the Fede­ral Council:

1. which recom­men­da­ti­ons of the Fede­ral Data Pro­tec­tion Com­mis­sio­ner have not been taken into account?

2 Why did this not hap­pen in detail?

3. how are the latest com­plaints of the data pro­tec­tion offi­cer in the area of Biga hand­led and implemented?

<

h1>Answer of the Fede­ral Council

<

h1>

1. for the time being, a distinc­tion must be made bet­ween “offi­ci­al” recom­men­da­ti­ons issued by the Fede­ral Data Pro­tec­tion Com­mis­sio­ner (FDPIC) on the basis of Artic­le 27 para­graph 4 of the Data Pro­tec­tion Act (DPA) and the recom­men­da­ti­ons issued by the FDPIC in his opi­ni­ons on fede­ral decrees and mea­su­res (Artic­le 31 para­graph 1 let­ter b DPA). The acti­vi­ty reports of the EDPS show that he issued 824 such opi­ni­ons to fede­ral bodies from 1 July 1993 to 31 March 1997. Each of the­se opi­ni­ons con­tai­ned num­e­rous sug­ge­sti­ons, so that the num­ber of such recom­men­da­ti­ons made by the EDPS during the peri­od men­tio­ned rea­ches seve­ral thou­sand. Neither the fede­ral admi­ni­stra­ti­on nor the EDPS keeps sta­tis­tics on how the­se recom­men­da­ti­ons have been fol­lo­wed up. The recom­men­da­ti­ons of the EDPS are sub­jec­ted to an in-depth exami­na­ti­on and dis­cus­sed with him befo­re they are accept­ed in who­le or in part or, in the event of dis­agree­ment, sub­mit­ted to the com­pe­tent depart­ment or the Fede­ral Coun­cil for eva­lua­ti­on. In the requests to the Fede­ral Coun­cil, the depart­ments report any dif­fe­ren­ces with the SDPC. The recom­men­da­ti­ons on the DOSIS infor­ma­ti­on system refer­red to in the inquiry have been recom­men­da­ti­ons of this type. It should also be noted that the DOSIS ordi­nan­ce of 26 June 1996 was sub­ject to a par­ti­al revi­si­on on 19 Novem­ber 1997 in the cour­se of the enact­ment of a gene­ral enforce­ment ordi­nan­ce to the Fede­ral Act of 7 Octo­ber 1994 on the Cen­tral Cri­mi­nal Poli­ce Offices of the Con­fe­de­ra­ti­on. The pre­pa­ra­ti­on of this par­ti­al revi­si­on was wel­co­med by the SDPC and accom­pa­nied from a tech­ni­cal point of view.

Bet­ween July 1, 1993 and May 31, 1997, the EDPS issued seven “offi­ci­al” recom­men­da­ti­ons in appli­ca­ti­on of Artic­le 27(4) FADP. Two of the­se have been accept­ed wit­hout reser­va­ti­on by the fede­ral offices con­cer­ned. One recom­men­da­ti­on has been rejec­ted on only one point, which the SDPC has sub­mit­ted to the rele­vant depart­ments for a decis­i­on. Four other recom­men­da­ti­ons have been rejec­ted in their enti­re­ty and sub­mit­ted to the com­pe­tent depart­ments for a decis­i­on. The depart­ment­al decis­i­ons have con­firm­ed the view of the offices with regard to the most important points in dis­pu­te; howe­ver, they have appro­ved cer­tain pro­po­sals of the EDPS which had pre­vious­ly been rejec­ted by the offices.

2. the rea­son for most of the dif­fe­ren­ces bet­ween the EDPS and the Fede­ral Coun­cil are dif­fe­rent views on the balan­cing of con­flic­ting inte­rests. In all cases whe­re the Fede­ral Coun­cil or the fede­ral admi­ni­stra­ti­on have not fol­lo­wed the recom­men­da­ti­ons of the EDPS, they have exhau­sted a dis­cretio­na­ry power gran­ted to them by the DPA.

The ope­ra­ti­on of the Inter­net file of anony­mous job­see­ker pro­files, which repres­ents a cen­tral pil­lar of the legal­ly ancho­red coope­ra­ti­on bet­ween the public and pri­va­te employment ser­vices (cf. Art. 85 para. 1 let. a and Art. 85b para. 2 Avig as well as Art. 33 para. 2 AVG), was dis­con­tin­ued until fur­ther noti­ce at the begin­ning of Octo­ber 1997 due to pro­blems in the are­as of data pro­tec­tion and access security.

The Fede­ral Coun­cil con­siders this form of coope­ra­ti­on bet­ween the public and pri­va­te employment ser­vices to be important and expe­di­ent in order to effi­ci­ent­ly sup­port job see­kers in their search for employment. It has the­r­e­fo­re ins­truc­ted the Biga to put the Inter­net file back into ope­ra­ti­on once the pro­blems in the are­as men­tio­ned have been resol­ved. The Biga is curr­ent­ly hol­ding talks with the rele­vant fede­ral agen­ci­es and the SDPC regar­ding data pro­tec­tion and access secu­ri­ty. Tech­ni­cal mea­su­res to impro­ve access secu­ri­ty have been iden­ti­fi­ed and their imple­men­ta­ti­on has been initiated.